CURITY PHARMA A.E.
PRIVACY POLICY
Document ID: LEG-WEB-001
Version: 1.0
Effective Date: 06 July 2026
Review Date: 06 July 2028
Document Owner: Curity Pharma A.E.
1. Introduction
Curity Pharma A.E. (”Curity Pharma”, “we”, “our”, or “us”) is committed to protecting the privacy and personal data of all individuals who visit our website, communicate with us, subscribe to our newsletter, or otherwise interact with us.
We recognise the importance of transparency in the processing of personal data and are committed to processing such data lawfully, fairly and transparently in accordance with:
- Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
- Greek Law 4624/2019;
- applicable European and Greek data protection legislation; and
- applicable legislation relating to electronic communications and cookies.
This Privacy Policy explains:
- what personal data we collect;
- why we collect it;
- how we use it;
- the legal basis for processing;
- who may receive your data;
- how long we retain it;
- your rights under the GDPR; and
- how you may contact us regarding your personal data.
This Privacy Policy applies solely to the website operated by Curity Pharma at: https://curitypharma.com
It does not apply to third-party websites that may be linked from our website, including recruitment pages hosted by external providers such as Workable.
2. Data Controller
For the purposes of the General Data Protection Regulation (GDPR), the Data Controller is:
CURITY PHARMA A.E.
20 Chelmou Street
15125 Marousi
Athens
Greece
GEMI No.: 148638001000
VAT No.: EL801081551
Telephone: +30 210 6390267
Email: [email protected]
Website: https://curitypharma.com
Curity Pharma determines the purposes and means by which personal data collected through this website are processed.
3. Scope of this Policy
This Privacy Policy applies to personal data processed through:
- browsing our website;
- subscribing to our newsletter;
- contacting us by email;
- contacting us through website forms;
- communications with suppliers, business partners and service providers;
- interactions relating to scientific collaborations;
- requests for corporate information;
- regulatory enquiries;
- media enquiries; and
- any other communications initiated through this website.
This Privacy Policy does not apply to:
- employment applications submitted through Workable;
- third-party websites;
- third-party services accessible through external links.
Where visitors choose to access external websites through links published on our website, those websites are responsible for their own privacy practices and privacy notices.
4. Our Commitment to Privacy
Curity Pharma is a pharmaceutical company committed to maintaining high standards of integrity, confidentiality and information security.
We process personal data only where there is a legitimate business purpose or another lawful basis under the GDPR, and only to the extent necessary for the relevant purpose.
We are committed to:
- collecting only data that are necessary;
- maintaining accurate information;
- protecting data using appropriate technical and organisational measures;
- retaining data only for as long as necessary;
- respecting the rights of data subjects; and
- continuously reviewing our privacy practices to ensure compliance with applicable legislation.
Personal data are never sold to third parties.
5. Definitions
For the purposes of this Privacy Policy:
Personal Data means any information relating to an identified or identifiable natural person.
Processing means any operation performed on personal data, including collection, recording, organisation, storage, consultation, use, disclosure, transmission, restriction, erasure or destruction.
Data Subject means the individual whose personal data are processed.
Controller means the natural or legal person that determines the purposes and means of processing personal data.
Processor means a third party that processes personal data on behalf of the Controller.
Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of personal data.
6. Categories of Personal Data We Collect
The categories of personal data processed by Curity Pharma depend on how you interact with our website and services. We are committed to collecting only the personal data that are adequate, relevant, and limited to what is necessary for the purposes described in this Privacy Policy.
The categories of personal data we may process include:
6.1 Information You Provide Voluntarily
When you contact us or subscribe to our newsletter, we may collect:
- Full name
- Company or organisation
- Job title (where provided)
- Email address
- Telephone number (if provided)
- Country or location (if provided)
- Subject of your enquiry
- Any information voluntarily included in your message
You should avoid including sensitive personal data or confidential medical information in communications submitted through the website unless specifically requested by Curity Pharma.
6.2 Newsletter Subscription Information
When you subscribe to our newsletter, we collect:
- Email address
- Date and time of subscription
- Confirmation of your consent where applicable
Newsletter subscriber information is stored within the WordPress database used to operate our website.
6.3 Technical Information
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Operating system
- Device type
- Language settings
- Pages visited
- Date and time of access
- Referring website
- Session identifiers
- Diagnostic and performance information
Some of this information may be collected through cookies or similar technologies, subject to your consent where required.
6.4 Information Collected Through Cookies
Our website may use cookies and similar technologies to:
- ensure the proper functioning of the website;
- enhance user experience;
- analyse website usage;
- improve website performance; and
- protect against malicious activity.
Further information is provided in our Cookie Policy.
7. How We Collect Personal Data
We collect personal data in several ways.
7.1 Information You Provide Directly
You may provide information by:
- subscribing to our newsletter;
- contacting us by email;
- completing website forms;
- requesting corporate information;
- communicating regarding scientific collaborations;
- making supplier or partnership enquiries.
7.2 Information Collected Automatically
Certain information is collected automatically when you use our website, including technical information generated by your browser or device.
Such information may be collected through:
- server logs;
- cookies;
- analytics technologies;
- security systems;
- Cloudflare security services.
7.3 Information Received From Third Parties
In limited circumstances, we may receive personal data from third parties where:
- you have authorised the disclosure;
- a business partner introduces you to Curity Pharma;
- a regulatory authority contacts us;
- disclosure is otherwise lawful.
8. Purposes of Processing
Curity Pharma processes personal data only for specified, explicit and legitimate purposes.
Depending on your interaction with our website, your personal data may be processed for the following purposes:
Corporate Communications
- responding to enquiries;
- providing requested information;
- communicating with suppliers;
- communicating with scientific collaborators;
- responding to regulatory authorities;
- responding to media enquiries.
Newsletter Distribution
Where you have subscribed, we process your email address in order to:
- send company news;
- provide updates regarding Curity Pharma;
- distribute scientific or corporate announcements;
- communicate developments relating to the company.
Website Operation
Personal data may be processed to:
- operate the website;
- maintain website security;
- prevent abuse;
- detect technical issues;
- monitor website performance;
- improve user experience.
Legal and Regulatory Compliance
We may process personal data where necessary to:
- comply with applicable laws;
- respond to lawful requests from competent authorities;
- establish, exercise or defend legal claims;
- fulfil regulatory obligations.
9. Legal Basis for Processing
Curity Pharma processes personal data only where a lawful basis exists under Article 6 of the General Data Protection Regulation.
The lawful bases relied upon include:
Consent (Article 6(1)(a))
We rely on your consent for:
- newsletter subscriptions;
- non-essential cookies;
- any processing where consent is specifically requested.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Legitimate Interests (Article 6(1)(f))
We process certain personal data where necessary for our legitimate interests, including:
- responding to enquiries;
- maintaining website security;
- preventing fraud or misuse;
- improving website performance;
- communicating with suppliers and business partners;
- protecting our legal rights.
Before relying on legitimate interests, we assess that such interests are not overridden by the rights and freedoms of the individuals concerned.
Legal Obligation (Article 6(1)(c))
We may process personal data where required to comply with legal or regulatory obligations.
Performance of a Contract (Article 6(1)(b))
Where applicable, personal data may be processed where necessary to enter into or perform a contract with you or your organisation.
10. Data Minimisation
Curity Pharma adheres to the principle of data minimisation.
We collect only the personal data that are necessary for the purposes described in this Privacy Policy and do not request information that is excessive or unrelated to those purposes.
We also seek to ensure that personal data remain accurate and, where appropriate, up to date. Individuals are encouraged to notify us if their personal data require correction or updating.
11. Retention of Personal Data
Curity Pharma retains personal data only for as long as necessary to fulfil the purposes for which they were collected or to comply with applicable legal, regulatory, accounting, or reporting obligations.
Retention periods are determined based on:
- the purpose of processing;
- applicable legal requirements;
- regulatory obligations;
- contractual obligations;
- legitimate business needs; and
- the necessity to establish, exercise, or defend legal claims.
Indicative retention periods include:
| Processing Activity | Typical Retention Period |
| Newsletter subscriptions | Until the individual unsubscribes or requests deletion |
| Contact enquiries | Up to 24 months after the enquiry has been resolved, unless a longer retention period is justified |
| Website security logs | Typically up to 12 months |
| Analytics data | According to the retention settings configured within the analytics platform |
| Records required for legal or regulatory compliance | As required by applicable legislation |
Where personal data are no longer required, they are securely deleted, anonymised, or otherwise disposed of in accordance with our internal procedures.
12. Recipients of Personal Data
Curity Pharma does not sell, rent, or commercially disclose personal data.
Personal data may be shared only where necessary with carefully selected third parties acting on our behalf or where disclosure is required by law.
Recipients may include:
- website hosting providers;
- cloud infrastructure providers;
- website maintenance providers;
- IT service providers;
- security service providers;
- analytics providers;
- legal advisers;
- auditors;
- regulatory authorities;
- competent public authorities where legally required.
All service providers processing personal data on behalf of Curity Pharma are required to process such data only in accordance with our instructions and applicable data protection legislation.
Where required by Article 28 GDPR, appropriate Data Processing Agreements (DPAs) are in place with processors.
13. International Transfers of Personal Data
Curity Pharma primarily stores and processes personal data within the European Economic Area (EEA).
However, certain service providers used in connection with the operation of our website may process limited personal data outside the EEA.
Where such transfers occur, Curity Pharma ensures that appropriate safeguards are implemented in accordance with Chapter V of the GDPR, including where applicable:
- an adequacy decision issued by the European Commission;
- the European Commission’s Standard Contractual Clauses (SCCs);
- other legally recognised transfer mechanisms.
We take reasonable steps to ensure that all international transfers provide an equivalent level of protection for personal data.
14. Website Hosting and Third-Party Service Providers
To operate and maintain our website, Curity Pharma relies on carefully selected service providers.
These providers may process limited personal data solely for the purpose of providing their respective services.
Our website infrastructure currently includes services such as:
- Cloudflare, which provides website security, content delivery and performance optimisation;
- Linode, which provides cloud hosting infrastructure;
- Google Analytics, where enabled and subject to user consent, to help us understand how visitors use our website;
- Google Tag Manager, used to manage scripts and tags deployed on the website;
- Google reCAPTCHA, where implemented, to protect forms from automated abuse;
- Google Maps, where embedded, to provide location information.
The use of these services is governed by the respective providers’ privacy policies and applicable contractual arrangements.
Curity Pharma periodically reviews the necessity and appropriateness of the third-party services used on its website.
15. Security of Personal Data
Curity Pharma implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.
These measures include, where appropriate:
- encrypted communications using HTTPS/TLS;
- secure hosting infrastructure;
- firewall and network protection;
- access controls;
- role-based access to administrative systems;
- authentication mechanisms;
- software updates and security patch management;
- regular system monitoring;
- malware protection;
- backup and disaster recovery procedures.
Although we take reasonable measures to protect personal data, no method of electronic transmission or storage can be guaranteed to be completely secure.
Users should also take appropriate precautions to protect their own devices and credentials.
16. Confidentiality
Access to personal data is restricted to authorised personnel who require such access in the performance of their duties.
Employees, contractors and service providers processing personal data on behalf of Curity Pharma are subject to appropriate confidentiality obligations.
17. Automated Decision-Making and Profiling
Curity Pharma does not use personal data collected through this website to make decisions based solely on automated processing, including profiling, that produce legal effects concerning individuals or similarly significantly affect them within the meaning of Article 22 GDPR.
Where analytics tools are used, they are intended solely to understand aggregated website usage and improve website performance.
18. Your Rights Under the GDPR
Under the General Data Protection Regulation (GDPR), you have a number of rights regarding your personal data. Curity Pharma is committed to respecting these rights and responding to requests in accordance with applicable law.
Subject to the conditions and limitations set out in the GDPR, you have the right to:
18.1 Right of Access
You may request confirmation as to whether Curity Pharma processes your personal data and, where this is the case, request access to that data together with information regarding the processing activities.
18.2 Right to Rectification
You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.
18.3 Right to Erasure (“Right to be Forgotten”)
You may request that your personal data be deleted where:
- the data are no longer necessary for the purposes for which they were collected;
- you withdraw consent and no other legal basis applies;
- you successfully object to processing;
- the data have been processed unlawfully; or
- erasure is required by law.
This right is not absolute and may be restricted where Curity Pharma is legally required to retain certain information.
18.4 Right to Restriction of Processing
You may request that processing of your personal data be restricted under the circumstances provided by Article 18 GDPR.
18.5 Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request a copy of your personal data in a structured, commonly used and machine-readable format and, where technically feasible, request that it be transmitted to another controller.
18.6 Right to Object
You have the right to object to processing carried out on the basis of Curity Pharma’s legitimate interests where there are grounds relating to your particular situation.
Where personal data are processed for direct marketing purposes, you may object at any time, and such processing will cease.
18.7 Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
19. Exercising Your Rights
Requests relating to personal data may be submitted by contacting:
Email: [email protected]
To protect personal data, Curity Pharma may request additional information to verify the identity of the individual making the request before responding.
Requests will normally be answered within one month, although this period may be extended where permitted by the GDPR due to the complexity or number of requests.
No fee will normally be charged unless a request is manifestly unfounded or excessive.
20. Newsletter Communications
Individuals who subscribe to the Curity Pharma newsletter consent to receiving occasional communications regarding:
- company news;
- corporate announcements;
- scientific developments;
- publications;
- research activities; and
- other information relevant to Curity Pharma’s activities.
Subscribers may unsubscribe at any time by:
- using the unsubscribe link included in newsletter communications (where available); or
- contacting Curity Pharma at [email protected].
Following an unsubscribe request, newsletter communications will cease within a reasonable period, although limited information may be retained where necessary to record the unsubscribe request and prevent future communications.
21. Cookies and Similar Technologies
Our website uses cookies and similar technologies to ensure its proper operation, improve user experience, enhance security, and better understand how visitors interact with our website.
Where required by applicable law, non-essential cookies are placed only after you have provided your consent through our Cookie Consent Platform.
You may modify or withdraw your cookie preferences at any time using the cookie settings available on our website.
Detailed information regarding the categories of cookies used, their purposes, and your choices is provided in our separate Cookie Policy, which forms an integral part of this Privacy Policy.
22. Third-Party Websites
Our website may contain links to third-party websites for the convenience of visitors.
These may include:
- scientific journals;
- regulatory authorities;
- professional organisations;
- external service providers;
- recruitment pages hosted by Workable;
- other informational resources.
Curity Pharma is not responsible for the privacy practices, content, or security of third-party websites.
Visitors are encouraged to review the privacy policies of any external websites they choose to visit.
23. Children’s Privacy
The Curity Pharma website is intended for a general audience and is designed to provide corporate, scientific, and educational information.
It is not directed specifically at children, and Curity Pharma does not knowingly collect personal data from children through its website.
If we become aware that personal data relating to a child have been submitted through the website without appropriate legal basis, we will take reasonable steps to delete such information.
24. Changes to this Privacy Policy
Curity Pharma may update this Privacy Policy from time to time in order to reflect:
- changes in legislation;
- regulatory guidance;
- technological developments;
- changes to website functionality;
- changes to processing activities; or
- organisational developments.
The most current version will always be published on our website.
The “Effective Date” and version number displayed at the beginning of this document indicate the applicable version.
25. Complaints
If you believe that your personal data have been processed in a manner that is inconsistent with applicable data protection legislation, we encourage you to contact Curity Pharma first so that we may seek to resolve your concerns.
You also have the right to lodge a complaint with the competent supervisory authority.
For individuals in Greece, the competent supervisory authority is the Hellenic Data Protection Authority (HDPA).
Further information is available on the HDPA website. Hellenic Data Protection Authority
26. Contact Us
Questions regarding this Privacy Policy or the processing of personal data may be addressed to:
CURITY PHARMA A.E.
20 Chelmou Street
15125 Marousi
Athens
Greece
GEMI: 148638001000
VAT: EL801081551
Telephone: +30 210 6390267
Email: [email protected]
Website: https://curitypharma.com